Enforcement
EN PPC Energie Muntenia SA: Insufficient legal basis for data processing
€3,000 fine - Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Content
The Romanian DPA has imposed a fine of EUR 3,000 on PPC Energie Muntenia SA. The controller forwarded customer data to a third company, which then contacted the data subjects for direct marketing purposes. The controller also failed to respond to a data subject's request to erase their data.
GDPR Articles: Art. 5 (1) a), b) GDPR, Art. 6 GDPR, Art. 12 (3), (4) GDPR, Art. 15 GDPR
Industry: Transportation and Energy